> are clean and clear legally because the victim chose to run their code If you ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		brigandish on Jan 11, 2022 \| parent \| context \| favorite \| on: What NPM should do to stop a new colors attack > are clean and clear legally because the victim chose to run their code If you take a knife from my kitchen and use it on yourself that is not my fault. If you ask me for a tissue and I provide you with a knife and tell you it's a tissue, then I have some responsibility. Ultimately, in either case, why were you not more careful?

vertis on Jan 11, 2022 [–]

I mean to strain the analogy it's more like feeding someone a sandwich and then having the ability to transmute the sandwich into a knife once they've already eaten it.

brigandish on Jan 11, 2022 | [–]

Did he meta-program that infinite loop? I haven't bothered to read the code… like everyone else :-D

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact